$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer File: 6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer (raw, json) Hash identifier: rKbDyeCFyvKHHN7I/IsJ+JU2lueCRxG0aG4Djv0d7sQ= Subject key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849A28B4D83453B0EFFD7BCFA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Apr 2025 18:15:27 +0000 Certificate not after: Tue 27 Jul 2027 20:39:47 +0000 Subordinate resources: AS: 401647 IP: 208.84.100.0/22 IP: 2602:f66a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:8b:4d:83:45:3b:0e:ff:d7:bc:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 24 18:15:27 2025 GMT Not After : Jul 27 20:39:47 2027 GMT Subject: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:ad:79:99:19:01:24:4c:9e:2c:11:20:f0: a4:35:bb:85:f4:7d:06:61:96:30:f6:6e:00:d3:4b: 03:27:0c:82:bf:51:ed:fa:59:0e:e4:4b:09:6a:b8: 99:2c:28:c5:fa:bf:79:d2:64:bb:09:08:7a:b6:f1: ea:4d:a3:9e:60:20:d4:7d:7e:a2:df:25:cf:d4:8c: 78:b5:78:c2:1b:4e:8b:e1:0e:31:6a:71:fd:23:5a: 07:97:cd:f5:94:6f:b4:9c:eb:0b:9d:31:88:01:c7: 95:aa:32:07:07:95:c7:37:91:31:77:31:2e:e5:75: 56:9c:7f:44:fa:d4:c1:66:05:1c:f1:aa:86:c6:8e: 92:ab:a4:15:7f:9d:53:37:63:c7:a1:7c:19:2b:9f: bc:9e:4b:50:9f:36:5e:d4:73:2d:17:a9:28:95:30: 94:e0:6a:43:27:92:44:79:6d:76:25:ea:69:03:d2: 37:4e:fa:a6:1e:42:04:b3:9c:9f:91:d2:cf:48:67: b1:b1:a7:d5:78:d2:b0:92:ce:43:1a:40:e1:f8:50: aa:9d:a2:be:bd:e8:46:da:7d:22:90:50:18:2d:ae: ce:01:65:35:6c:b8:84:d6:0d:22:05:1d:5f:eb:ed: f9:57:7d:02:3b:40:2a:5a:c3:0e:75:b7:14:18:e0: 15:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 208.84.100.0/22 IPv6: 2602:f66a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401647 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e4:8d:1d:31:97:45:8d:2d:e8:03:19:a4:67:07:3f:71:3f: d0:40:24:39:6e:dd:3c:1d:89:72:57:ff:03:82:1c:81:ad:bf: 27:38:d5:81:95:68:eb:30:c8:73:0e:18:70:fe:93:69:10:94: 38:09:e3:ee:b5:34:73:3c:c3:be:54:f4:2a:03:b2:3d:9d:1b: fd:5f:27:73:2b:a8:89:61:47:6a:6e:21:d5:2f:65:3f:b8:3d: 33:77:07:af:f7:55:78:67:0d:e3:c5:f8:03:33:9f:f9:f5:7c: 86:4c:b2:2a:cd:bd:80:b8:e7:fc:fc:6d:0f:8c:55:9d:b9:a7: 9e:2e:df:c5:0d:ef:e2:68:08:88:af:5b:e3:10:99:4a:7a:10: 08:e0:ff:8d:dc:e4:15:82:70:d1:8e:d5:53:35:be:3c:1c:b8: 87:51:5c:da:4a:3d:f2:44:0e:e7:09:6f:e5:96:e6:05:83:9f: a0:86:b8:c5:88:0b:a3:35:ea:36:d6:4d:a7:07:b4:c6:02:d6: 0b:11:49:12:04:99:63:cd:84:01:63:09:57:9a:57:c5:80:01: 1a:52:d3:ff:80:11:e6:8c:15:a5:e6:15:40:a5:2e:a6:d0:7b: ff:e5:2a:31:44:52:77:36:b6:fb:88:4d:31:d4:3a:d2:50:d3: 3d:f5:b1:f3 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmii02DRTsO/9e8+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyNDE4MTUyN1oXDTI3MDcyNzIwMzk0N1owLzEtMCsGA1UEAxMk NmYzN2JmNjgtNjdlNy00ZTY3LWEwOTMtYzg4YTNkN2ZlMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKKteZkZASRMniwRIPCkNbuF9H0GYZYw9m4A 00sDJwyCv1Ht+lkO5EsJariZLCjF+r950mS7CQh6tvHqTaOeYCDUfX6i3yXP1Ix4 tXjCG06L4Q4xanH9I1oHl831lG+0nOsLnTGIAceVqjIHB5XHN5ExdzEu5XVWnH9E +tTBZgUc8aqGxo6Sq6QVf51TN2PHoXwZK5+8nktQnzZe1HMtF6kolTCU4GpDJ5JE eW12JeppA9I3TvqmHkIEs5yfkdLPSGexsafVeNKwks5DGkDh+FCqnaK+vehG2n0i kFAYLa7OAWU1bLiE1g0iBR1f6+35V30CO0AqWsMOdbcUGOAVWQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFChPz5KWyLC+ppnTfwazfpo56ouxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 ZjM3YmY2OC02N2U3LTRlNjctYTA5My1jODhhM2Q3ZmUwNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZmMzdiZjY4LTY3ZTctNGU2Ny1h MDkzLWM4OGEzZDdmZTA0ZC82ZjM3YmY2OC02N2U3LTRlNjctYTA5My1jODhhM2Q3 ZmUwNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALQVGQwDgQCAAIwCAMGBCYC9moAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYg7zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB15I0dMZdFjS3oAxmkZwc/cT/Q QCQ5bt08HYlyV/8DghyBrb8nONWBlWjrMMhzDhhw/pNpEJQ4CePutTRzPMO+VPQq A7I9nRv9XydzK6iJYUdqbiHVL2U/uD0zdwev91V4Zw3jxfgDM5/59XyGTLIqzb2A uOf8/G0PjFWduaeeLt/FDe/iaAiIr1vjEJlKehAI4P+N3OQVgnDRjtVTNb48HLiH UVzaSj3yRA7nCW/lluYFg5+ghrjFiAujNeo21k2nB7TGAtYLEUkSBJljzYQBYwlX mlfFgAEaUtP/gBHmjBWl5hVApS6m0Hv/5SoxRFJ3Nrb7iE0x1DrSUNM99bHz -----END CERTIFICATE-----Generated at Sun Oct 26 00:37:54 2025 by rpki-client